Login Guide for First-Time Users

To ensure the security of your digital information, SJSU uses Duo Multi-Factor Authentication (MFA). There are two required procedures and two optional procedures for your SJSU account activation and setup of Duo MFA:

Set Up Your SJSUOne Password for the First Time

  1. Go to the SJSUOne Password Set/Reset page
  2. Enter your nine-digit SJSU ID.
  3. Read and accept the CSU Responsible Use Policy [pdf]
  4. Click Continue.
  5. Choose one of the following methods to verify your identity:
    • Provide your birth date and the last four digits of your SSN
    • Send a reset link to your email address
  6. Click Continue.
  7. Enter your new password.
    Passwords should adhere to the following requirements:
      • Passwords must be between 15 - 64 characters
      • Capital letters, numbers, spaces, and special characters are optional
      • Do not use your name, SJSU ID, date of birth, any part of your SSN, SJSU-specific terms, or keywords associated with the university
      • Do not use common words

You will receive a prompt notifying you that your password has been successfully changed.

Set Up Duo Mobile MFA

If you do not have a smartphone or do not want to install DUO on your phone, you may contact the IT Service Desk (408-924-1530) to request a hardware token (key fob). Requesting a key fob will take more time than the self-service Duo Mobile app activation process.

IMPORTANT: To set up two-factor authentication with DUO, you will need two devices -- one to show a QR code and one to scan the QR code.

  1. Go to The Spartan App Portal at One.SJSU
  2. Click the "Sign In" button on the top right side of the screen under the search bar
    One.SJSU.edu web page screenshot.
  3. Enter your SJSU ID and password on the SJSU Single-Sign On page
  4. Click "Sign In" at the bottom of the page
    Login Screen for SJSU via Single Sign On.
  5. Click "Set Up" at the end of the prompt titled "Set up security methods", then click the "Enroll" button on the following prompt.
    Screenshot of Universal Prompt prompt in Duo.
  6. After that is an options menu for authentications. We recommend installation of "Duo Mobile", the mobile phone app with the green icon.
    Option select for Duo Mobile or Security Key.
  7. The prompt will then ask for some information on your phone, including the complete phone number.
    Prompt to enter phone number to login Duo Mobile.
  8. If setting up on a mobile device, tap the "Continue" button and open the link to proceed to the app.
    Prompt to open Duo Mobile.
  9. If logging in on a desktop or laptop, scan the QR code with the Duo Mobile app, then open the link. Remember to use the Duo Mobile app for this step, and to adjust permission for use of the camera where necessary.
    Prompt to scan QR code in Duo Mobile.
  10. If the account setup is good, there should be a screen setting an account name. The default account name is "San Jose State University".
    Name account in Duo Mobile.
  11. Go back to the setup prompt in your browser and select the "Continue" button to proceed with logging in.
    Confirmation that account was added to Duo Mobile.
  12. Follow the Duo Universal Prompt to complete your login. "Send me a Push" brings up a yes-or-no prompt within the app, while "Enter a Passcode" uses the six-digit passcode displayed in your app account listing.
    The various ways to login via Duo Mobile.

When you complete your Duo Mobile enrollment: You will be prompted by OKTA to provide a security question and a secondary email.
Choose a security question from the drop down menu, or make your own question then provide an answer.

The secondary email should match the email you used when you applied. If you need to update your secondary email, you must first complete all OKTA steps.
Click “Create Account.” You will be able to access MySJSU.

For instructions on changing  your secondary email, see Set My Preferred Email Address


You are now enrolled in DUO two-factor authentication and your SJSUOne ID account is fully activated.

Set Up Recovery with Duo Restore

This procedure is optional but recommended to ensure that you maintain access to your SJSU account if you get a new device or need to reset your device to factory settings.

Enable Auto-Push for MFA

You can streamline your multi-factor authentication process when logging in by enabling auto-push to automatically prompt you to authenticate using your method of choice via the Duo Mobile app.

This procedure is optional.

To enable auto-push:

  1. Visit the Multi-Factor Authentication Profile page.
  2. Enter your SJSU ID and password and click Login.
  3. Before authenticating with MFA, select Settings > My Settings & Devices.
    Duo Mobile Screen with options to select My Settings & Devices.
  4. Complete multi-factor authentication as normal.
  5. Under Default Device, select your default device from the drop-down list.
  6. Under When I log in, select Automatically send this device a Duo Push.
    Duo Mobile Push Selection
  7. Click Save.

NOTE: To turn off auto-push for MFA, select Ask me to choose an authentication method.


Frequently Asked Questions


Login support is provided by the IT Service Desk. You may:
Because login and MFA are security services, the IT Service Desk must confirm your identity before providing assistance.